Package Health

@nrwl/workspace

The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.

Latest 19.8.4NPMNPM

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Package scaffoldingdanger

The package includes a README, but it explicitly says @nrwl/workspace was renamed to @nx/workspace and will no longer be published. That is a direct adoption and continuity concern despite repository tests and changelog evidence.

Release historydanger

The package has 1,661 releases since April 2019, but no releases in the last 12 months and its latest release was in May 2025. This supports the README’s indication that the package line is being retired.

Dependency profilecaution

The release has one runtime dependency, @nx/workspace, which provides a clear migration target but also reinforces that this package is a legacy wrapper rather than the preferred package going forward.

Workflow auditcaution

All 13 workflows were analyzed and all 81 action references are pinned, with no untrusted checkout or script-injection paths. High-confidence template-injection findings and high-confidence ad hoc package installs remain workflow hygiene concerns, while the low-confidence cache findings carry limited weight.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@nx/workspace
Version 19.8.4
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
7 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform